CVE-2024-25431 Memory corruption in n/a
A remote attacker can escalate privileges or execute code via a crafted file exploiting an out-of-bounds read in the WebAssembly runtime.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-25431?
CVE-2024-25431 is a high-severity memory corruption vulnerability in n/a, published on 8 Nov 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.
Weakness: CWE-125
Which versions are affected by CVE-2024-25431?
It affects 1 product.
Products include Bytecodealliance Webassembly Micro Runtime.
How do I fix CVE-2024-25431?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-25431 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-25431 exists.
Other vulnerabilities in n/a
- CVE-2024-27532 Null dereference in n/a
- CVE-2024-34251 Memory corruption in n/a
- CVE-2023-48105 Memory corruption in n/a
- CVE-2025-43853 iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
- CVE-2025-54126 WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified
Sources
Also known as AZL-53175, AZL-53187, GHSA-gf29-gwj9-7xvj.